STIGQter STIGQter: STIG Summary: Apple OS X 10.14 (Mojave) Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The macOS system must disable the guest account.

DISA Rule

SV-209605r610285_rule

Vulnerability Number

V-209605

Group Title

SRG-OS-000364-GPOS-00151

Rule Version

AOSX-14-002063

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

This is managed with Login Window Policy.

Check Contents

To check that the system is configured to disable the guest account, run the following command:

# /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableGuestAccount

If the result is null or not "DisableGuestAccount = 1", this is a finding.

Vulnerability Number

V-209605

Documentable

False

Rule Version

AOSX-14-002063

Severity Override Guidance

To check that the system is configured to disable the guest account, run the following command:

# /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableGuestAccount

If the result is null or not "DisableGuestAccount = 1", this is a finding.

Check Content Reference

M

Target Key

2930

Comments